# 



What is Claimed is: 
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L A mnthnri nf "trnnnrr prnr^ram rp atpna l for SUbsequen^Teplay, COmprisir 

the steps of: 

receiving access control information and the program material encrypted, 
according to a first encryption key, the access control information including tj*e first 
encryption key and control data; 

further encrypting the access control information and the encryj}f6d program 
material according to a second encryption key; 

encrypting the second encryption key according to a third Encryption key to 
produce a fourth encryption key; and 

storing the encrypted access control information ancL&icrypted program material 
and the fourth encryption key. 

2. The method of claim 1 5 further composing the steps of: 

reading the further encrypted access control information and encrypted program 
material and the fourth encryption key; 

decrypting the further encrypted ac^fess control information to produce the 
encrypted access control information; 

decrypting the fourth encryptj^fn key using the third encryption key to produce the 
second encryption key; 

decrypting the encrypted&ccess control information to produce the first 
encryption key; and 

decrypting the progiT&m material using the first encryption key. 
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3. The method of claim 2, wherein / 

the access control information further comprises data describing a right associated 
with the program material; and / 

the steps of decrypting the encrypted access ccmtrol information to produce the 
first encryption key and decrypting the program malarial using the first encryption key is 
performed according to the data describing the rij^nt. 

4. The method of claim 3, wherem the right is expressed in a metadata table. 

5. The method of claim 4, wherein the metadata table comprises data selected 
from the group comprising: / 

at least one default value wherein the data describing a right associated with the 
program material comprises a change to at least one of the default values; and 

at least one control valueyexpressing a condition that must be satisfied before pre- 
cached program material is pre/sented to the subscriber. 

6. The methodyof claim 3 3 wherein the right is selected from the group 
comprising: / 

a storage right; / 

a viewing rightf having at least one viewing right characteristic selected from the 
group comprising: / 

a non-purchase lifetime of the program material; 

a lifetime of the program material after a purchase of the program material; 
amumber of permitted views per purchase of the program material; 
A cost to repurchase the program material; and 
a number of permitted views per repurchase of the program material. 



1.1 The method of claim 2, further comprising the step of providing the 
decrypted program material to a presentation device. 
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8. The method of claim 2, further comprising/he steps of: 
storing the decrypted program material; and 

reading the decrypted program material according to a user command. 
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1 9. The method of claim 8, wherein th/user command is selected from the 

2 group comprising: 

3 a play command; 

4 a rewind command; 

5 a fast forward command; 

6 a fast reverse play command; 

7 a fast forward play command^ 

8 a pause command; 

9 a frame step command; 
1 0 a stop command. 

1 10. The method <2>f claim 2, further comprising the steps of: 

2 re-encrypting the encrypted program material according to the second encryption 

3 key; 

4 encrypting the /econd encryption key according to a third encryption key to 

5 produce a fourth enewption key; and 

6 storing the ce-encrypted program material and the fourth encryption key. 



1 11. T/he method of claim 10, wherein: 

2 the access control information further comprises data describing viewing rights for 

3 the program material; and 

4 the /teps of decrypting the encrypted access control information to produce the 

5 first enervation key and decrypting the program material using the first encryption key is 

6 performed according to the data describing the viewing rights. 
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12. The method of claim 11, further comprising the steps of: 
reading the re-encrypted program material ancz the fourth encryption key; 
decrypting the fourth encryption key with £ne third key to produce the second 

encryption key; and 

decrypting the program material using' the second encryption key. 

13. The method of claim 12^flirther comprising the step of providing the 
decrypted program material to a presentation device. 

14. The method ofrclaim 12, wherein the steps of reading the re-encrypted 
program material and the fourth encryption key, decrypting the fourth encryption key 
with the third encryptioiylcey to produce the second encryption key, and decrypting the 
program material usinj^the second encryption key are performed according to a user 
command. 



15. Ahe method of claim 14, wherein the user command is selected from the 
group compulsing: 

a play command; 

rewind command; 
a fast forward command; 
a fast reverse play command; 
a fast forward play command; 
a pause command; 
a frame step command; and 
a stop command. 
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1 16. An apparatus for storing program material for subsequent replay, 

2 comprising: / 

3 a tuner, for receiving encrypted access control information and the program 

4 material encrypted according to a first encryption key, the aefcess control information 

5 including the first encryption key and control data; / 

6 a first encryption module, communicatively coupled to the tuner and 

7 communicatively coupleable to a data storage deviceythe first encryption module for 

8 further encrypting the encrypted program material 2nd the access control information 

9 according to a second encryption key; / 

ID a second encryption module, communicatively coupled to the first encryption 

1 1 module and communicatively coupleable to me data storage device, the second 

12 encryption module for encrypting the second encryption key according to a third 

13 encryption key to produce a fourth encryption key; 

14 a first decryption module, communicatively coupleable to the disk drive, for 

1 5 decrypting the fourth encryption key to produce the second encryption key; 

16 a second decryption module, communicatively coupled to the first decryption 

17 module and the tuner and communicatively coupleable to the data storage device, for 

18 decrypting the further encrypted program material to produce the encrypted program 

19 material and the encrypted access control information using the second encryption key; 

20 a conditional acces/module, communicatively coupleable to the second 

21 decryption module and tjae tuner, for selectably accepting the access control information 

22 selected from the group comprising the access control information received in the tuner 

23 and the access control information decrypted by the second decryption module, the 

24 conditional access module comprising a third decryption module for decrypting the 

25 encrypted access Control information to produce the first encryption key; and 

26 a fourth ^decryption module for decrypting the encrypted program material to 

27 produce unendrypted program material using the first encryption key. 




17. The apparatus of claim 16, further comprising: 

a third encryption module, communicatively coucHed to the fourth decryption 
module and communicatively coupleable to a second media storage device, the third 
encryption module for encrypting the unencrypted program material according to the 
second encryption key; and / 

a fifth decryption module, communicatively coupleable to the second media 
storage device, for decrypting the encrypted program material using the second 
encryption key. / 

18. The apparatus of claim 17,/wherein the third encryption module encrypts 
the unencrypted program material and o/ovides the encrypted program material to the 
data storage device when a subscriber Selects a trick play operation 

19. The apparatus of cl/im 17, wherein the third encryption module encrypts 
the unencrypted program materia* and provides the encrypted program material to the 
data storage device when the subscriber purchases the program material. 

20. The apparatus of claim 16, wherein: 

the fourth decryption module is communicatively coupled to the first encryption 
module; and / 

the second decryption module is communicatively coupleable to a presentation 
device. / 

21. The apparatus of claim 20, wherein: 

the first encryption module encrypts the unencrypted program material using the 
second encryption key, and provides the encrypted program material to the data storage 
device; and / 

the second decryption module accepts the encrypted program material from the 
data storage device and decrypts the encrypted program material using the second 
encryption key. 
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1 22. The apparatus of claim 16, further comprisingyrfie data storage device, for 

2 storing and retrieving the further encrypted program materjals and the fourth encryption 

3 key. 

1 23. The apparatus of claim 16, wherein^J-ne third decryption module is 

2 implemented in a smartcard. 

1 24. The apparatus of claim 16, Wherein the control data is temporally variant. 
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1 25. An apparatus for storing program material for subsequent replay, 

2 comprising: 

3 means for receiving acce£& control information and the program material 

4 encrypted according to a first Encryption key, the access control information including the 

5 first encryption key and control data; 

6 means for further^encrypting the access control information and the encrypted 

7 program material accoraing to a second encryption key; 

8 means for decrypting the second encryption key according to a third encryption 

9 key to produce a fourth encryption key; and 

1 0 means for storing the encrypted access control information and encrypted program 

1 1 material and thfe fourth encryption key. 





26. The apparatus of claim 25, further comprising: 

means for retrieving the further encrypted accessr control information and 
encrypted program material and the fourth encryption icey; 

means for decrypting the further encrypted adcess control information to produce 
the encrypted access control information; / 

means for decrypting the fourth encryption key using the third encryption key to 
produce the second encryption key; / 

means for decrypting the encrypted access control information to produce the first 
encryption key; and / 

means for decrypting the program material using the first encryption key. 

27. The apparatus of claim 26, wherein: 

the access control informations further comprises data describing at least one right 
for the program material; and / 

encrypted access control information the encrypted program material is decrypted 
according to the data describing me right. 

28. The apparatus pf claim 27, wherein the right is selected from the group 
comprising: / 

a storage right; / 

a viewing right, having at least one viewing right characteristic selected from the 
group comprising: / 



a non-n&rchase lifetime of the program material; 

a lifetime of the program material after a purchase of the program material; 
a number of permitted views per purchase of the program material; 
a cost to repurchase the program material; and 

a number of permitted views per repurchase of the program material. 
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/The apparatus of claim 26, further comprising means for providing the 
>gram material to a presentation device. 




1 30. The apparatus of claim 26, further comprising: 

2 means for storing the decrypted program material; and 

3 means for retrieving the decrypted program maternal according to a user 

4 command. / 

1 31 . The apparatus of claim 30, wherein me user command is selected from the 

2 group comprising: / 

3 a play command; / 

4 a rewind command; / 

5 a fast forward command; / 

6 a fast reverse play command; / 

7 a fast forward play command:/ 

8 a pause command; / 

9 a frame step command; ana 
10 a stop command. / 

1 32. The apparatus of claim 26, further comprising: 

2 means for re-encrypting the decrypted program material according to the second 

3 encryption key; / 

4 means for encrypting the second encryption key according to a third encryption 

5 key to produce a fourth encryption key; and 

6 means for storing the re-encrypted program material and the fourth encryption 

7 key. / 

1 33. AThe apparatus of claim 32, wherein: 

2 the access control information further comprises data describing at least one right 

3 for the program material; and 

4 enerypted access control information the encrypted program material is decrypted 

5 according to the data describing the right. 
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34. The apparatus of claim 33, further comprising: 

means for reading the re-encrypted program material and the fourth encryption 



means for decrypting the fourth encryption key with the third key to produce the 
second encryption key; and 

means for decrypting the program ntfaterial using the second encryption key. 



1 35. The apparatus of clairaf 34, further comprising means for providing the 

2 decrypted program material to a presentation device. 
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36. The apparatuyof claim 34, wherein the re-encrypted program material and 
the fourth encryption keyis read, the fourth decryption key is decrypted with the third key 
to produce the second encryption key, and the program material is decrypted using the 
second decryption k^y according to a user command. 



10 



37. a he apparatus of claim 36, wherein the user command is selected from the 
group composing: 

a may command; 

rewind command; 
a fast forward command; 
a fast reverse play command; 
a fast forward play commanf 
a pause comma 
a fram^fep command; and 
'stop command. 



